This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/fta7rhlIzZLyvEwKrTYOqXfaI1o.roa File: fta7rhlIzZLyvEwKrTYOqXfaI1o.roa (raw, json) Hash identifier: wkfvDv19UKd8c+ZsdmvASGpolGZNSXvJMP6wVwFy+38= Subject key identifier: 7E:D6:BB:AE:19:48:CD:92:F2:BC:4C:0A:AD:36:0E:A9:77:DA:23:5A Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f Certificate serial: 019BDAEE7E929FF2B61842F591BE3F67F4CF Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/fta7rhlIzZLyvEwKrTYOqXfaI1o.roa Signing time: Tue 20 Jan 2026 10:23:41 +0000 ROA not before: Tue 20 Jan 2026 10:23:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21348 IP address blocks: 80.95.128.0/20 maxlen: 20 80.246.144.0/20 maxlen: 20 80.246.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:ee:7e:92:9f:f2:b6:18:42:f5:91:be:3f:67:f4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f Validity Not Before: Jan 20 10:23:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ed6bbae1948cd92f2bc4c0aad360ea977da235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:80:86:4e:b5:a6:8d:96:48:6e:ad:ca:41: 0a:7d:dc:f6:3d:01:8b:ee:68:01:8e:be:a4:a1:06: ff:e5:48:cb:67:9f:52:9f:72:e0:a0:84:80:e4:4d: 17:00:c6:21:02:96:1e:8a:32:94:64:fb:80:f5:bd: 5e:64:98:13:d6:42:fd:39:81:a0:74:49:70:a7:01: 1c:a5:1f:65:6b:c6:a1:88:07:e6:d3:03:19:43:fd: b2:12:ef:f8:bc:c8:bc:fe:2f:93:7d:3d:10:9c:8d: 68:09:d7:55:04:78:ec:80:7a:87:9d:be:bf:98:3f: b7:04:2d:9d:ca:17:3e:2d:d0:ef:a6:09:48:9b:2d: e8:3a:70:eb:59:6e:3b:2d:02:bf:00:ad:85:b3:8f: cf:54:1e:ef:c1:8d:08:97:51:bc:d9:db:e6:64:1a: b8:46:bd:2f:f5:5e:b8:cc:90:ee:e3:2d:4f:39:8f: a1:e1:7d:c4:a5:c3:ec:a7:3d:01:cc:c7:36:1f:b2: 01:82:4f:88:ae:d4:60:05:5d:51:39:26:f6:58:72: 30:b0:e8:53:66:96:56:16:99:a1:c2:23:40:a8:d8: 47:1a:a0:c1:dc:ca:7d:06:82:8c:c0:e5:ff:f8:34: 53:bd:8c:f5:f7:46:39:99:4b:4d:df:a0:b8:73:b7: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:BB:AE:19:48:CD:92:F2:BC:4C:0A:AD:36:0E:A9:77:DA:23:5A X509v3 Authority Key Identifier: keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/fta7rhlIzZLyvEwKrTYOqXfaI1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.95.128.0/20 80.246.144.0/20 Signature Algorithm: sha256WithRSAEncryption 30:b9:25:48:76:b3:a0:f5:bb:91:fc:b0:23:c6:f8:d1:3a:e5: 3a:8e:0d:b4:fb:b3:5e:f4:e0:12:a6:1a:a0:95:8f:e7:b9:a8: 08:04:6e:87:ac:99:6f:e2:ac:1c:c3:03:70:57:dc:09:19:73: 8d:17:91:c8:2b:6e:17:75:50:bf:4b:b3:3e:fb:91:ce:13:45: e1:85:2c:96:70:af:52:7a:9a:85:a2:ee:d3:45:83:40:47:77: f3:3a:d9:58:92:06:de:d5:52:be:f7:64:70:92:36:87:1e:b5: d4:53:23:da:64:43:0c:99:37:bd:6f:16:27:b7:85:62:45:0d: 72:df:d2:e6:a7:7e:30:62:e9:82:5c:7d:5f:f9:55:b4:91:27: 07:7c:6f:5c:99:8a:da:34:d0:9a:a8:09:2d:df:67:12:f0:ec: 70:16:22:fb:22:54:3d:93:27:66:6d:e1:0c:ac:c6:f9:e2:ef: 62:b1:4b:73:b1:1f:9e:a6:e3:fe:4e:0e:d8:43:b8:fc:18:e9: b7:22:55:25:8e:2a:57:54:86:3f:72:4c:42:bc:5e:0b:79:50: b9:3c:6f:91:30:68:13:62:12:d1:2c:1f:60:5c:6a:75:8b:b5: 0d:36:4b:e0:57:fe:ed:5d:47:c6:93:05:2d:81:cc:e1:01:95: f7:dd:71:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZva7n6Sn/K2GEL1kb4/Z/TPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw OTA4NmYwHhcNMjYwMTIwMTAyMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQ2YmJhZTE5NDhjZDkyZjJiYzRjMGFhZDM2MGVhOTc3ZGEyMzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvaAhk61po2WSG6tykEKfdz2PQGL 7mgBjr6koQb/5UjLZ59Sn3LgoISA5E0XAMYhApYeijKUZPuA9b1eZJgT1kL9OYGg dElwpwEcpR9la8ahiAfm0wMZQ/2yEu/4vMi8/i+TfT0QnI1oCddVBHjsgHqHnb6/ mD+3BC2dyhc+LdDvpglImy3oOnDrWW47LQK/AK2Fs4/PVB7vwY0Il1G82dvmZBq4 Rr0v9V64zJDu4y1POY+h4X3EpcPspz0BzMc2H7IBgk+IrtRgBV1ROSb2WHIwsOhT ZpZWFpmhwiNAqNhHGqDB3Mp9BoKMwOX/+DRTvYz190Y5mUtN36C4c7dF9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH7Wu64ZSM2S8rxMCq02Dql32iNaMB8GA1UdIwQY MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt NzE4ZmQxOTVjNWViLzEvZnRhN3JobEl6Wkx5dkV3S3JUWU9xWGZhSTFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUF+AAwQE UPaQMA0GCSqGSIb3DQEBCwUAA4IBAQAwuSVIdrOg9buR/LAjxvjROuU6jg20+7Ne 9OASphqglY/nuagIBG6HrJlv4qwcwwNwV9wJGXONF5HIK24XdVC/S7M++5HOE0Xh hSyWcK9SepqFou7TRYNAR3fzOtlYkgbe1VK+92RwkjaHHrXUUyPaZEMMmTe9bxYn t4ViRQ1y39Lmp34wYumCXH1f+VW0kScHfG9cmYraNNCaqAkt32cS8OxwFiL7IlQ9 kydmbeEMrMb54u9isUtzsR+epuP+Tg7YQ7j8GOm3IlUljipXVIY/ckxCvF4LeVC5 PG+RMGgTYhLRLB9gXGp1i7UNNkvgV/7tXUfGkwUtgczhAZX33XHC -----END CERTIFICATE-----Generated at Tue Feb 10 02:32:28 2026 by rpki-client